Defending Against DPRK IT Workers – An Implementation and Operational Guide banner image
Guide
BCON COLLECTIVE

Defending Against DPRK IT Workers – An Implementation and Operational Guide

Download our step-by-step approach to reducing the risk of DPRK IT workers gaining trusted access through your hiring process. This guide helps you understand where your biggest gaps are, prioritise the controls that will make the most difference, and connect recruitment, identity, device and post-hire signals into a defence your teams can actually operate.

Rather than trying to implement every recommendation at once, you’ll learn how to start at the right maturity level, build and test a working programme, and strengthen it over time as your capabilities develop.

Inside the guide:

  • A 60-second maturity assessment to identify your starting point
  • A seven-step roadmap for building a working pilot
  • The priority controls to implement when time and resources are limited
  • Four practical threat hunts for SOC and insider-risk teams
  • Guidance for connecting evidence across HR, Security, IT, IAM, Finance and Procurement
  • Controls covering application, interviews, onboarding and the first 90 days
  • A practical operational workbook for setting up, investigating and escalating cases
  • Human-led scoring and corroboration guardrails to support proportionate decision
DPRK - Author Senior Cyber Threat Intelligence Analyst

Download Guide